This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/UWX8SxCjwL_qmxdOe6nySrZQC84.roa
File:                     UWX8SxCjwL_qmxdOe6nySrZQC84.roa (raw, json)
Hash identifier:          D5R5Nyowo4jjOW+4uW1uT9NqCdmsnMIgdkwB6H1oOfI=
Subject key identifier:   51:65:FC:4B:10:A3:C0:BF:EA:9B:17:4E:7B:A9:F2:4A:B6:50:0B:CE
Certificate issuer:       /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial:       019B7D5C8E5812C19FAAF3CA4126F500345B
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/UWX8SxCjwL_qmxdOe6nySrZQC84.roa
Signing time:             Fri 02 Jan 2026 06:19:36 +0000
ROA not before:           Fri 02 Jan 2026 06:19:36 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     62206
IP address blocks:        95.215.40.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:7d:5c:8e:58:12:c1:9f:aa:f3:ca:41:26:f5:00:34:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
        Validity
            Not Before: Jan  2 06:19:36 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=5165fc4b10a3c0bfea9b174e7ba9f24ab6500bce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:b8:7c:4b:07:89:e6:89:f1:e8:dd:65:1d:04:
                    ce:3a:9e:00:21:f7:d3:2d:64:91:1b:bd:b3:08:df:
                    4e:b0:09:a0:18:b2:a2:ba:be:0f:47:18:a0:59:a3:
                    81:87:de:ee:f6:0d:0f:7d:bd:2f:09:23:75:f7:64:
                    56:b8:42:a5:c8:8b:70:e9:56:6e:ea:bb:18:3c:22:
                    06:4a:ab:3c:c1:c7:31:ed:1f:b8:01:d5:2b:44:f4:
                    1e:e9:03:64:b4:4a:88:89:b5:1f:4e:dd:a7:e4:bb:
                    7d:15:f9:97:a6:a8:b4:95:64:ed:8b:a1:a5:d9:db:
                    5d:f6:35:73:8b:75:35:2f:e8:73:ff:b4:68:a1:86:
                    ef:80:84:d1:bb:c3:57:71:05:a4:00:9a:ab:4b:3d:
                    76:d9:60:6e:f8:09:92:cf:ec:a2:e8:34:6f:f5:67:
                    e0:96:24:5f:52:fc:72:b2:67:8c:6f:33:97:f5:e6:
                    e8:4d:d1:42:3b:e2:de:70:3e:9f:9e:be:77:8a:6f:
                    db:8c:47:ad:89:7e:67:93:d3:f7:d2:96:1a:7e:2b:
                    f3:6b:0f:0e:0e:24:6a:ee:ee:6c:25:76:61:92:04:
                    89:8d:76:6f:f3:e6:a6:d0:81:80:76:6e:e9:52:7b:
                    5d:58:0d:9d:54:d4:78:42:a9:a3:f0:a8:b3:97:06:
                    f9:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:65:FC:4B:10:A3:C0:BF:EA:9B:17:4E:7B:A9:F2:4A:B6:50:0B:CE
            X509v3 Authority Key Identifier:
                keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/UWX8SxCjwL_qmxdOe6nySrZQC84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  95.215.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         56:ce:55:67:2c:f5:4c:9f:b6:0a:89:aa:91:5a:3a:90:9a:69:
         ed:c3:73:7c:86:2f:37:c4:ce:9b:fa:5a:3c:98:1a:d2:eb:4b:
         a2:3a:c6:fa:6e:8f:ba:df:45:65:ef:b6:b6:d8:94:b4:c2:1a:
         b1:0c:74:f3:6d:f1:1a:f7:2a:e2:09:b2:7c:15:4a:88:63:fd:
         17:91:84:24:25:0b:90:39:79:5a:6d:48:01:4e:23:c0:88:5a:
         5d:fa:45:ae:f7:c7:af:45:85:a3:cb:8f:29:9f:38:83:2a:b6:
         05:fc:a9:a7:02:9a:25:02:30:ff:93:b3:f3:e6:ca:67:4b:4b:
         af:dd:5b:b7:8e:3d:f1:c8:a6:b2:fb:38:3d:21:b0:c7:20:9c:
         ce:93:06:51:71:94:c8:54:bf:5d:26:f5:1c:49:30:64:98:ab:
         45:56:f3:44:5c:0a:23:a2:04:ee:09:16:70:21:fb:0d:b6:e7:
         87:b8:fe:1e:c3:0b:78:0e:86:4e:a0:07:a1:68:48:32:52:d2:
         4e:6e:73:96:26:b7:9c:65:e6:c7:08:4b:57:57:60:64:5c:21:
         30:ce:fe:63:84:5c:f8:13:db:bb:1c:4b:f6:49:cf:c9:92:e9:
         3c:ea:16:3b:be:8c:77:dc:b4:4b:4f:9e:ed:af:74:cf:f6:f7:
         20:77:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 17:34:25 2026 by rpki-client